There was an error while loading. Please reload this page.
1 parent 1761740 commit 9bf71d9Copy full SHA for 9bf71d9
1 file changed
.github/workflows/test.yaml
@@ -21,16 +21,7 @@ jobs:
21
matrix:
22
tf: [tofu, terraform]
23
steps:
24
- # Only checkout for pull_request_target events (not for push to main)
25
- # pull_request_target runs in the context of the base branch for security,
26
- # so we must explicitly checkout the PR's head commit to test the actual changes
27
- - name: Checkout PR Head
28
- if: github.event_name != 'push'
29
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
30
- with:
31
- ref: ${{ github.event.pull_request.head.sha }}
32
- fetch-depth: 0
33
- - uses: masterpointio/github-action-tf-test@c3b619f3bca9e4f482b9e0fb3166ab3f02d9d54c # v1.0.0
+ - uses: masterpointio/github-action-tf-test@fix/pull-request-target-sha
34
with:
35
tf_type: ${{ matrix.tf }}
36
aws_role_arn: ${{ vars.TF_TEST_AWS_ROLE_ARN }}
0 commit comments